Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/8449b812853b2bf09e01e3f22a237e03ffb69beb.roa
File:                     8449b812853b2bf09e01e3f22a237e03ffb69beb.roa (raw, json)
Hash identifier:          EpzFZFv8Hs39NBiT6Z24NTLb4K6WHNBQMuitji97Xds=
Subject key identifier:   FE:37:49:E3:07:F7:F0:25:13:0E:E9:BE:01:33:CA:86:7C:0D:F5:EF
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       01004D
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/8449b812853b2bf09e01e3f22a237e03ffb69beb.roa
Signing time:             Sun 14 May 2023 15:31:52 +0000
ROA not before:           Sat 13 May 2023 15:31:52 +0000
ROA not after:            Wed 14 May 2025 15:31:52 +0000
asID:                     269931
IP address blocks:        190.110.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65613 (0x1004d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 15:31:52 2023 GMT
            Not After : May 14 15:31:52 2025 GMT
        Subject: CN=8449b812853b2bf09e01e3f22a237e03ffb69beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:57:99:67:15:af:45:f9:15:5b:63:b0:01:
                    f5:b9:50:26:c5:8f:f3:a1:a8:4a:ca:b4:6b:d6:65:
                    78:9b:67:51:6d:b1:47:0a:18:07:29:d5:63:20:98:
                    51:95:e0:aa:a8:d7:a8:e2:d1:c1:18:1d:26:0d:ee:
                    7a:b3:e3:af:33:c5:c7:00:15:6c:73:b6:f8:4c:70:
                    7d:81:2b:2c:ac:f6:6f:fe:4f:ac:96:c1:51:9f:98:
                    fb:8c:9b:45:a0:45:d1:ac:92:f4:de:ab:22:1e:04:
                    68:7d:b8:18:f9:f9:8b:6a:40:35:b7:d7:4c:bb:7e:
                    6b:8e:a0:3b:ce:06:4a:2f:3c:1b:b2:c8:4a:a2:8e:
                    cc:e5:a3:9a:d4:ea:13:02:04:ee:77:6e:d8:b1:8e:
                    31:c7:7c:32:83:db:ef:b1:c7:1e:91:8e:a4:ff:16:
                    f1:3b:5a:41:80:9a:19:9c:4a:ab:d7:cc:e3:5a:39:
                    44:47:fc:98:17:72:c5:05:73:92:d8:5c:7a:2c:d2:
                    2b:49:63:bf:0c:20:b2:d3:aa:6f:80:72:cb:9a:5d:
                    3d:f8:4f:a0:3c:50:ce:5c:53:73:3d:3c:5c:31:e5:
                    22:34:d2:4c:c2:54:c6:c1:4a:23:af:9f:33:3c:0c:
                    48:d2:46:52:1d:90:f9:b6:3c:66:c6:38:0b:33:a0:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:37:49:E3:07:F7:F0:25:13:0E:E9:BE:01:33:CA:86:7C:0D:F5:EF
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/8449b812853b2bf09e01e3f22a237e03ffb69beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:26:0a:e9:a4:ae:81:62:f5:cc:6f:0c:5f:fe:4f:e5:fb:31:
         0c:95:14:b6:2f:76:b1:c1:2d:9c:21:8f:b0:0d:e8:f1:43:fa:
         5e:b7:3d:25:0d:4f:5c:85:84:a0:c0:a7:c1:5a:05:2d:36:b7:
         ed:af:4a:95:3d:c3:d3:69:ec:23:55:4a:3f:f8:08:60:46:9f:
         a3:35:6a:29:1f:d7:52:21:a6:f0:4d:72:a2:e3:e9:e0:b5:de:
         49:27:bb:fa:63:4d:c7:38:fe:e0:86:fe:47:b7:f3:d9:b6:e8:
         d3:7c:48:60:d7:1e:23:dc:31:20:5c:f6:6d:12:4e:a5:76:9e:
         88:11:5c:8a:62:f7:ec:8e:66:ba:ae:9b:b7:ef:05:a4:71:d4:
         05:5f:10:ac:86:df:c1:ea:6f:78:cc:fa:e8:3d:c8:09:a0:d3:
         b6:fa:9b:c9:34:75:ae:a0:77:67:fe:7f:b9:09:b3:66:51:50:
         d2:42:94:4f:ed:98:72:55:d0:fd:91:de:9d:88:e8:9a:af:56:
         03:b4:5f:03:6c:01:cc:01:37:5e:25:25:a2:e5:35:d5:6a:ef:
         ec:32:c9:18:1b:03:4d:12:62:08:40:1a:45:e9:5b:b7:e3:2b:
         c8:36:52:00:cc:b4:e9:9c:77:4e:d0:fb:fe:f1:79:00:c6:7f:
         d1:03:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org